Trivy के पुराने संस्करण डाउनलोड करें

## 🔐 Security update 🛡️

Trivy v0.76.2 bundles several security fixes:

• Official container images are rebuilt on Alpine 3.24.3, which fixes `musl`/`musl-utils` (CVE-2026-107891), and the build picks up fixed `libcurl` (24 CVEs, including HIGH CVE-2026-92392) and `brotli-libs` (CVE-2026-111497) from the `v3.24` package repository.
• `golang.org/x/net` is bumped to v0.62.0, fixing two vulnerabilities in `golang.org/x/net/html`：CVE-2026-78661 (quadratic complexity when coalescing text nodes) and CVE-2026-97045 (missing ancestor namespace check when rendering raw text).
• `github.com/go-jose/go-jose/v4` is bumped to v4.1.6, fixing [GHSA-mgcc-cww5-fp2q](https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q).

We recommend upgrading to v0.76.2 and redeploying container images to apply these updates.

## Changelog
• 3f6334d223b52188324af3b9923b4249cd206652 release：v0.76.2 [release/v0.76] (#11552)
• 1cabe83c11ffed6e984ab46be8886e1e01516ead fix(deps)：bump golang.org/x/net from 0.61.0 to 0.62.0 [backport: release/v0.76] (#11554)
• be08de47d0d76fca7e992c0f47fbcf7853f8a713 chore(deps)：bump the common group across 1 directory with 14 updates [backport: release/v0.76] (#11555)
• a8537d389cbd0fa215eddfddc27150fc7bc82a6c fix(deps)：bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 [backport: release/v0.76] (#11553)
• ae26b88c3b3c380808e767dfb63f9b8dcd5f64fd fix(deps)：bump alpine to 3.24.3 in container images [backport: release/v0.76] (#11551)

## 🔐 Security update：eMudhra CA incident 🛡️

Trivy v0.76.1 includes mitigations for the [eMudhra intermediate CA key compromise](https://blog.cloudflare.com/emudhra-certificate-compromise/).

• Official binaries are built with Go 1.27.3, which includes the certificate distrust mitigation tracked as [CVE-2026-111943](https://go.dev/issue/82345).
• Official container images include an updated Alpine CA trust store that rejects the affected certificate chains.

We recommend upgrading to v0.76.1 and redeploying container images to apply these updates. If you build Trivy from source, use Go 1.27.3 or later and keep your runtime CA trust store up to date.

## Changelog
• e713f67f7d54decdcd9b3132c9751833dcced698 release：v0.76.1 [release/v0.76] (#11445)
• 6647bd6ec5924087956285b773b8cae10508736e fix(deps)：bump the aws group across 1 directory with 6 updates [backport: release/v0.76] (#11446)
• e0964c97819b1d6a45b7e0426803745f173fc550 fix(deps)：bump the docker group with 3 updates [backport: release/v0.76] (#11443)
• 992c360c33d9f9627bb24c1fe3f20815110c88e5 fix(deps)：bump the common group with 3 updates [backport: release/v0.76] (#11442)

## ⚡ Highlights ⚡
👉 [https://github.com/aquasecurity/trivy/discussions/11409](https://github.com/aquasecurity/trivy/discussions/11409)

## Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0760-2026-10-14

## ⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/11333

## Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0750-2026-10-01

⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/10907
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/10907
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/10907
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

Changelog
- 055a5c8 release: v0.71.2 [release/v0.71] (#10871)
- 875328a fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#10870)
- 998f7b3 chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#10867)

Changelog
- 164b383 release: v0.71.1 [release/v0.71] (#10818)
- a72d9a4 fix(oci): validate artifact filename
- 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
- a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
- 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
- ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)

⚡ Highlights ⚡
👉 https://github.com/aquasecurity/trivy/discussions/10767
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

Release Highlights
⚡ #10546
Changelog
https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0700-2026-04-16

Changelog
- 6fb20c8 release: v0.69.3 [release/v0.69] (#10293)
- dabefec fix(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 [backport: release/v0.69] (#10291)

Changelog
- cfa322e release: v0.69.2 [release/v0.69] (#10266)
- 86debce fix(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [backport: release/v0.69] (#10267)
- cf3d4cd fix(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 [backport: release/v0.69] (#10264)
- 6dfd3b0 ci: remove apidiff workflow